Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
File:                     564LxrVkpXPje515fLdeuxt24AE.mft (raw, json)
Hash identifier:          dkgrGYqfjHOXCEbrVjOGGQE+tkkTrzlFRL28TfSIlZI=
Subject key identifier:   63:A3:24:EC:54:3E:11:5A:9D:C6:4E:9B:D7:A4:41:03:AC:36:70:8A
Authority key identifier: E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01
Certificate issuer:       /CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
Certificate serial:       01967FB4D8077131A5EA9BD0926DE732B78B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
Manifest number:          1511
Signing time:             Tue 29 Apr 2025 04:01:20 +0000
Manifest this update:     Tue 29 Apr 2025 04:01:20 +0000
Manifest next update:     Wed 30 Apr 2025 04:01:20 +0000
Files and hashes:         1: 564LxrVkpXPje515fLdeuxt24AE.crl (hash: whPQk7g1N8UwrlTHSuJxcj3qGggX2xALVZYsIhAWl/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 04:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:d8:07:71:31:a5:ea:9b:d0:92:6d:e7:32:b7:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ae0bc6b564a573e37b9d797cb75ebb1b76e001
        Validity
            Not Before: Apr 29 04:01:20 2025 GMT
            Not After : Apr 30 04:01:20 2025 GMT
        Subject: CN=63a324ec543e115a9dc64e9bd7a44103ac36708a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:c5:19:25:a8:9f:db:85:e7:97:2c:1d:a9:
                    80:d5:04:84:cb:af:c6:02:16:08:eb:9d:c5:2e:67:
                    3c:b8:f6:97:d2:b6:72:bf:aa:15:38:bd:ff:aa:52:
                    a0:42:8d:9a:ed:9b:1d:e4:cc:08:6c:bc:2d:90:15:
                    8f:e4:e7:d9:cd:6f:f9:91:80:6a:5c:d5:79:6d:5f:
                    b6:a6:8f:88:a2:6e:e4:2b:c5:65:89:41:e6:40:69:
                    1b:1a:f3:41:1b:66:9f:72:08:33:74:17:ca:aa:a1:
                    cf:ce:be:ee:ad:ad:f4:b5:27:b5:bd:f2:f4:1e:32:
                    7a:df:d7:9d:1b:cf:de:de:30:f3:93:74:d3:b5:37:
                    d0:1c:07:a8:fc:56:4e:a8:e0:29:14:38:d7:92:7a:
                    cc:90:a7:7b:0d:9f:93:24:78:60:e6:4c:e9:25:f5:
                    98:53:c0:7f:7b:0b:0d:03:27:29:b6:35:08:aa:d3:
                    dc:1c:88:d3:d2:c3:61:aa:c1:10:6d:af:0c:97:7b:
                    46:71:42:c3:14:65:c2:bc:f0:51:26:03:08:a3:d9:
                    f7:bc:72:61:e6:ab:54:70:d0:7a:32:b8:48:2b:04:
                    5e:f9:d0:4e:58:83:f5:61:72:f6:1d:e4:89:1b:d8:
                    26:e9:2a:69:a4:a9:46:b6:a1:dd:1f:b5:82:cb:67:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A3:24:EC:54:3E:11:5A:9D:C6:4E:9B:D7:A4:41:03:AC:36:70:8A
            X509v3 Authority Key Identifier:
                keyid:E7:AE:0B:C6:B5:64:A5:73:E3:7B:9D:79:7C:B7:5E:BB:1B:76:E0:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/564LxrVkpXPje515fLdeuxt24AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/6bd321-7f5b-4152-8d0c-9b107bef9030/1/564LxrVkpXPje515fLdeuxt24AE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:95:d4:fe:ba:34:15:fb:80:8a:01:d5:1b:be:0c:25:31:88:
         0a:65:58:a6:62:31:70:7b:8b:b0:f0:79:38:06:4e:8c:6b:6c:
         1b:7c:b4:f8:5b:16:ea:18:50:e4:48:9c:8c:a6:26:8a:b0:c2:
         98:11:18:5f:57:fb:24:8a:03:ae:1a:57:ad:5e:41:03:5a:38:
         dc:44:c7:8f:8f:d6:93:4a:e2:65:44:9d:59:49:77:a0:d8:e3:
         ff:75:a2:eb:40:6a:1d:54:4d:f3:56:e6:a7:42:a9:7d:48:f9:
         2e:34:4a:81:39:29:a0:01:1d:f5:1e:ab:0a:90:a1:f1:a0:92:
         58:f4:dd:36:5d:72:4f:7e:fd:59:e9:3b:d1:e2:d7:d3:d2:bb:
         7f:09:bb:ad:8f:73:69:ba:b1:8c:7a:c8:36:56:70:30:3e:18:
         a8:82:55:7a:a0:c5:e1:60:c2:84:f7:7a:1b:19:88:a5:53:f7:
         70:11:d1:d8:02:a4:2b:7b:3e:33:c6:16:05:a1:0c:3c:7c:8e:
         a8:89:04:7b:c7:04:d9:46:c3:b6:fc:b4:8f:e1:05:74:18:23:
         79:a1:1a:6b:14:6e:37:3e:98:37:7b:eb:0a:33:3d:91:76:87:
         84:33:91:4d:4d:d9:92:e6:8a:fd:ec:fc:52:71:7b:0b:7b:5d:
         56:0f:5a:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tNgHcTGl6pvQkm3nMreLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3YWUwYmM2YjU2NGE1NzNlMzdiOWQ3OTdjYjc1ZWJiMWI3
NmUwMDEwHhcNMjUwNDI5MDQwMTIwWhcNMjUwNDMwMDQwMTIwWjAzMTEwLwYDVQQD
Eyg2M2EzMjRlYzU0M2UxMTVhOWRjNjRlOWJkN2E0NDEwM2FjMzY3MDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufPFGSWon9uF55csHamA1QSEy6/G
AhYI653FLmc8uPaX0rZyv6oVOL3/qlKgQo2a7Zsd5MwIbLwtkBWP5OfZzW/5kYBq
XNV5bV+2po+Iom7kK8VliUHmQGkbGvNBG2afcggzdBfKqqHPzr7ura30tSe1vfL0
HjJ639edG8/e3jDzk3TTtTfQHAeo/FZOqOApFDjXknrMkKd7DZ+TJHhg5kzpJfWY
U8B/ewsNAycptjUIqtPcHIjT0sNhqsEQba8Ml3tGcULDFGXCvPBRJgMIo9n3vHJh
5qtUcNB6MrhIKwRe+dBOWIP1YXL2HeSJG9gm6SpppKlGtqHdH7WCy2d0jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOjJOxUPhFancZOm9ekQQOsNnCKMB8GA1UdIwQY
MBaAFOeuC8a1ZKVz43udeXy3XrsbduABMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMt
OWIxMDdiZWY5MDMwLzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82YmQzMjEtN2Y1Yi00MTUyLThkMGMtOWIxMDdiZWY5MDMw
LzEvNTY0THhyVmtwWFBqZTUxNWZMZGV1eHQyNEFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxJXU/ro0
FfuAigHVG74MJTGICmVYpmIxcHuLsPB5OAZOjGtsG3y0+FsW6hhQ5EicjKYmirDC
mBEYX1f7JIoDrhpXrV5BA1o43ETHj4/Wk0riZUSdWUl3oNjj/3Wi60BqHVRN81bm
p0KpfUj5LjRKgTkpoAEd9R6rCpCh8aCSWPTdNl1yT379Wek70eLX09K7fwm7rY9z
abqxjHrINlZwMD4YqIJVeqDF4WDChPd6GxmIpVP3cBHR2AKkK3s+M8YWBaEMPHyO
qIkEe8cE2UbDtvy0j+EFdBgjeaEaaxRuNz6YN3vrCjM9kXaHhDORTU3ZkuaK/ez8
UnF7C3tdVg9abA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:13:59 2025 by rpki-client